All true, but when A) your entire business model relies on keeping those IDs hidden and B) you’re storing them on intentionally “promiscuous” media (RFID), it d

All true, but when A) your entire business model relies on keeping those IDs hidden and B) you’re storing them on intentionally “promiscuous” media (RFID), it definitely increases the attack surface in a big way. I’m sure this is a calculated risk, they probably feel confident in their ability to detect unauthorized attempts to read the tags.